[Dev] CVS to SVN conversion plans
Heikki Toivonen
heikki at osafoundation.org
Tue May 24 10:59:59 PDT 2005
Ramaswamy S wrote:
> On 5/24/05, Mike Taylor <bear at code-bear.com> wrote:
>>No - it's cached by the client in a per-project file that is read-only
>>by the user - very similiar to what .cvspass is/does
>>
> That's what I also said :-) . svn cmds that require auth have a
> --no-auth-cache option - but that would mean typing credentials every
> time.
So it seems like the svn server stores passwords in a clear text file
unless you are using svn+ssh or https with client certs. NOT nice.
If anyone knows of any plugins/extensions/hacks/fixes that would enable
encryption of the server password file I would be interested.
Also if anyone could get a list of svn clients that support client
certificates for https it would be useful.
Finally information about clients that cache client passwords but don't
store the passwords in the clear would be nice to have.
--
Heikki Toivonen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 249 bytes
Desc: OpenPGP digital signature
Url : http://lists.osafoundation.org/pipermail/dev/attachments/20050524/ffa2d606/signature.bin
More information about the Dev
mailing list